Updates need to be installed by an administrator? djrun10 6/21/2007 1:01:01 PM Running WSUS 2.0 SP1, there are certain workstations (less than 10%) which exist in a OU and has a WSUS group policy setting that require an administrator to login and install the updates. When this happens the workstation's response time is extremely slow, until the updates are installed and everything is back to normal. Other workstations in this same OU are able to download/install the updates with no problem. Are insight why certain machines are requiring an administrator to login and install these updates? Below is the WSUS group policy setting........... Computer Configuration (Enabled)hide Administrative Templateshide Windows Components/Windows Updatehide Policy Setting Allow Automatic Updates immediate installation Enabled Allow non-administrators to receive update notifications Enabled Configure Automatic Updates Enabled Configure automatic updating: 4 - Auto download and schedule the install The following settings are only required and applicable if 4 is selected. Scheduled install day: 5 - Every Thursday Scheduled install time: 03:00 Policy Setting Delay Restart for scheduled installations Enabled Wait the following period before proceeding with a scheduled restart (minutes): 5 Policy Setting Enable client-side targeting Enabled Target group name for this computer MWS Policy Setting No auto-restart for scheduled Automatic Updates installations Enabled Re-prompt for restart with scheduled installations Enabled Wait the following period before prompting again with a scheduled restart (minutes): 25 Policy Setting Reschedule Automatic Updates scheduled installations Enabled Wait after system startup (minutes): 1 Policy Setting Specify intranet Microsoft update service location Enabled Set the intranet update service for detecting updates: http://dkht0620:8530 Set the intranet statistics server: http://dkht0620:8530 (example: http://IntranetUpd01) User Configuration (Disabled)hide No settings defined.

Re: Updates need to be installed by an administrator? "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 6/22/2007 4:08:59 AM "djrun10" <djrun10[ at ]discussions.microsoft.com> wrote in message news:B78A9B9D-33F4-468E-AB43-89D6F2D6054F[ at ]microsoft.com... [Quoted Text] > Running WSUS 2.0 SP1, there are certain workstations (less than 10%) which > exist in a OU and has a WSUS group policy setting that require an > administrator to login and install the updates. When this happens the > workstation's response time is extremely slow, until the updates are > installed and everything is back to normal. Other workstations in this > same > OU are able to download/install the updates with no problem. > > Are insight why certain machines are requiring an administrator to login > and > install these updates? Hmmm.. and I thought the issue was "....the workstation's response time is extremely slow, until the updates are installed", which is almost certainly the overdiscussed svchost.exe issue. As for why certain machines are requiring an administrator to login and install updates interactively -- that answer would almost certainly be: Because you've configured them to require this, or you're interfering with the normal execution of the scheduled installation event. > Configure automatic updating: 4 - Auto download and schedule the install > The following settings are only required > and applicable if 4 is selected. > Scheduled install day: 5 - Every Thursday > Scheduled install time: 03:00 So, the answer to the question would be for you to obtain the WindowsUpdate.log for any given Thursday at 3am, and show the log entries where an installation should have occurred, but did not. In all likelihood, since you've scheduled /installation/ to only occur *weekly*, you've got admins logging on sometime after approval/detect/download, but before 3am Thursday and being (correctly, by design) prompted to install the available updates. This will happen for *any* administrator on *any* machine where the updates have been downloaded and are scheduled for installation, but the installation time has not yet been reached. It will also happen if this machine is powered OFF at 3am on Thursday, such that the installation can never occur, and you've disabled the policy setting "Reschedule Automatic Updates scheduled installations" -- which you have not. -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....